$ rpki-client -vvf rpki-rps.arin.net/repository/c5da413e44384d7b87e0a74b42ca1867/0/3F67057F77B86603B6C216FF577CB3146053E4E5.mft File: 3F67057F77B86603B6C216FF577CB3146053E4E5.mft (raw, json) Hash identifier: nqR8HeLpmEW86WM9b0YTaJMVR0wVRIOv8vGQWtBEO5g= Subject key identifier: 9A:A5:02:A4:FF:25:BE:35:40:54:AA:89:A3:07:08:3D:C5:61:6F:1D Authority key identifier: 3F:67:05:7F:77:B8:66:03:B6:C2:16:FF:57:7C:B3:14:60:53:E4:E5 Certificate issuer: /CN=A91301EE0000/serialNumber=3F67057F77B86603B6C216FF577CB3146053E4E5 Certificate serial: 10DAA0E270285DE9C7976C959F7D0BB9538A7446 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/P2cFf3e4ZgO2whb_V3yzFGBT5OU.cer Subject info access: rsync://rpki-rps.arin.net/repository/c5da413e44384d7b87e0a74b42ca1867/0/3F67057F77B86603B6C216FF577CB3146053E4E5.mft Manifest number: CB Signing time: Mon 20 Oct 2025 11:05:42 +0000 Manifest this update: Mon 20 Oct 2025 11:00:42 +0000 Manifest next update: Tue 21 Oct 2025 13:13:42 +0000 Files and hashes: 1: 3F67057F77B86603B6C216FF577CB3146053E4E5.crl (hash: 31xirbi+inQp49diXWWr60qQ4+ZTOnwhxQXVRLpv+eE=) 2: 3136352e39392e3132342e302f32332d3233203d3e20343031363832.roa (hash: 85gBMcl8T92cShSttg2IE1+cL7srToN1WMPpMffNR/c=) Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/c5da413e44384d7b87e0a74b42ca1867/0/3F67057F77B86603B6C216FF577CB3146053E4E5.crl rsync://rpki-rps.arin.net/repository/c5da413e44384d7b87e0a74b42ca1867/0/3F67057F77B86603B6C216FF577CB3146053E4E5.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/P2cFf3e4ZgO2whb_V3yzFGBT5OU.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Oct 2025 13:13:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:da:a0:e2:70:28:5d:e9:c7:97:6c:95:9f:7d:0b:b9:53:8a:74:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91301EE0000, serialNumber=3F67057F77B86603B6C216FF577CB3146053E4E5 Validity Not Before: Oct 20 11:00:42 2025 GMT Not After : Oct 21 13:13:42 2025 GMT Subject: CN=9AA502A4FF25BE354054AA89A307083DC5616F1D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:56:63:7a:84:f9:77:ee:23:cb:eb:cc:7d:77: 9b:1b:c1:ac:2f:ec:07:ef:4b:16:fa:79:30:bf:2b: ce:fe:ac:03:0a:25:76:c3:25:cd:cf:b0:07:6a:50: 08:e8:00:83:24:8c:a1:86:5a:88:4d:2b:00:7b:5e: 3a:c3:7d:2b:11:0b:62:a6:92:60:63:38:e5:91:1f: f4:d1:4a:21:23:be:0c:dd:fc:51:d8:20:5f:fe:f8: d6:83:49:5f:62:46:07:25:20:47:4b:63:96:9d:fd: 1e:75:9f:db:47:43:c9:61:67:ab:4c:95:ec:12:fa: b5:77:06:18:6a:45:70:4d:f7:51:2e:5d:c7:45:38: d4:a6:32:98:a8:7a:a7:2b:be:2d:2c:e7:8b:1e:0c: 13:76:be:80:5a:91:e2:f9:99:bb:98:85:e7:de:2c: c4:b9:e9:d1:b3:03:34:5b:6a:9b:96:2b:25:58:d8: e4:2f:2e:ad:57:c9:4d:76:b5:f1:e7:6e:62:90:02: 28:04:e7:85:fd:d6:e6:b7:7a:45:e3:f5:4b:45:ce: d2:57:8a:b0:39:d6:ad:4d:b8:27:52:ca:08:fd:22: 1a:78:b1:bb:cd:43:52:cd:08:01:34:08:42:2d:f9: d4:c9:14:fd:61:88:f2:75:8f:d8:dd:89:60:9d:b2: 30:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:A5:02:A4:FF:25:BE:35:40:54:AA:89:A3:07:08:3D:C5:61:6F:1D X509v3 Authority Key Identifier: keyid:3F:67:05:7F:77:B8:66:03:B6:C2:16:FF:57:7C:B3:14:60:53:E4:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/c5da413e44384d7b87e0a74b42ca1867/0/3F67057F77B86603B6C216FF577CB3146053E4E5.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/P2cFf3e4ZgO2whb_V3yzFGBT5OU.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/c5da413e44384d7b87e0a74b42ca1867/0/3F67057F77B86603B6C216FF577CB3146053E4E5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:60:ed:c2:da:2e:86:20:b7:d7:ee:df:18:7b:8b:02:5f:7c: 63:f5:71:08:15:dc:46:60:5c:34:c0:13:30:92:ca:b1:5c:84: c6:ff:e8:75:58:0a:82:9a:2e:71:00:51:75:84:85:64:75:2b: 37:7d:ba:c3:eb:41:d1:5f:fc:c2:f2:ca:4f:f2:dd:97:dd:5a: 81:5f:ca:59:10:26:10:36:bf:8e:e7:bf:48:08:00:bc:08:ab: a6:68:84:9d:59:61:30:42:bb:ae:37:88:7d:48:cd:6f:69:d3: 0a:ea:b2:eb:91:7e:80:07:dc:36:38:6e:8e:d0:51:6d:4f:e5: 93:4b:82:76:b4:a4:a4:98:a4:26:33:4e:a0:08:a6:9e:21:9c: 00:3b:10:ca:45:96:12:c1:e4:5b:23:2b:6b:27:6f:bd:6f:44: 93:b3:c0:f8:34:d2:71:0a:c6:b4:9b:5a:aa:15:3a:87:03:15: 10:60:1f:f6:1f:24:dd:f8:5a:36:44:fb:db:50:53:20:1d:74: fc:a0:73:f9:f9:2a:78:6b:f9:e0:32:f2:12:a3:18:0c:14:e6: 22:ea:30:50:70:54:83:e9:78:84:f3:f9:6a:cb:c0:af:51:6a: fe:75:04:52:cd:e0:f1:50:c8:76:8a:be:7b:d0:fd:88:d7:8b: 24:1d:80:72 -----BEGIN CERTIFICATE----- MIIFUzCCBDugAwIBAgIUENqg4nAoXenHl2yVn30LuVOKdEYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxMzAxRUUwMDAwMTEwLwYDVQQFEygzRjY3MDU3Rjc3 Qjg2NjAzQjZDMjE2RkY1NzdDQjMxNDYwNTNFNEU1MB4XDTI1MTAyMDExMDA0MloX DTI1MTAyMTEzMTM0MlowMzExMC8GA1UEAxMoOUFBNTAyQTRGRjI1QkUzNTQwNTRB QTg5QTMwNzA4M0RDNTYxNkYxRDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJlWY3qE+XfuI8vrzH13mxvBrC/sB+9LFvp5ML8rzv6sAwoldsMlzc+wB2pQ COgAgySMoYZaiE0rAHteOsN9KxELYqaSYGM45ZEf9NFKISO+DN38UdggX/741oNJ X2JGByUgR0tjlp39HnWf20dDyWFnq0yV7BL6tXcGGGpFcE33US5dx0U41KYymKh6 pyu+LSznix4ME3a+gFqR4vmZu5iF594sxLnp0bMDNFtqm5YrJVjY5C8urVfJTXa1 8eduYpACKATnhf3W5rd6ReP1S0XO0leKsDnWrU24J1LKCP0iGnixu81DUs0IATQI Qi351MkU/WGI8nWP2N2JYJ2yMO0CAwEAAaOCAkYwggJCMB0GA1UdDgQWBBSapQKk /yW+NUBUqomjBwg9xWFvHTAfBgNVHSMEGDAWgBQ/ZwV/d7hmA7bCFv9XfLMUYFPk 5TAOBgNVHQ8BAf8EBAMCB4AwgYUGA1UdHwR+MHwweqB4oHaGdHJzeW5jOi8vcnBr aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS9jNWRhNDEzZTQ0Mzg0ZDdiODdlMGE3 NGI0MmNhMTg2Ny8wLzNGNjcwNTdGNzdCODY2MDNCNkMyMTZGRjU3N0NCMzE0NjA1 M0U0RTUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9y cGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3 QzcyRkQxRkYyL1AyY0ZmM2U0WmdPMndoYl9WM3l6RkdCVDVPVS5jZXIwgZMGCCsG AQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6Ly9ycGtpLXJwcy5hcmlu Lm5ldC9yZXBvc2l0b3J5L2M1ZGE0MTNlNDQzODRkN2I4N2UwYTc0YjQyY2ExODY3 LzAvM0Y2NzA1N0Y3N0I4NjYwM0I2QzIxNkZGNTc3Q0IzMTQ2MDUzRTRFNS5tZnQw GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQC AAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQEL BQADggEBACpg7cLaLoYgt9fu3xh7iwJffGP1cQgV3EZgXDTAEzCSyrFchMb/6HVY CoKaLnEAUXWEhWR1Kzd9usPrQdFf/MLyyk/y3ZfdWoFfylkQJhA2v47nv0gIALwI q6ZohJ1ZYTBCu643iH1IzW9p0wrqsuuRfoAH3DY4bo7QUW1P5ZNLgna0pKSYpCYz TqAIpp4hnAA7EMpFlhLB5FsjK2snb71vRJOzwPg00nEKxrSbWqoVOocDFRBgH/Yf JN34WjZE+9tQUyAddPygc/n5Knhr+eAy8hKjGAwU5iLqMFBwVIPpeITz+WrLwK9R av51BFLN4PFQyHaKvnvQ/YjXiyQdgHI= -----END CERTIFICATE-----Generated at Tue Oct 21 04:23:04 2025 by rpki-client